VYPR
← All advisories
Critical severity9.8NVD Advisory· Published Oct 2, 2019· Updated Jun 17, 2026

CVE-2019-12157

CVE-2019-12157

Description

In JetBrains UpSource versions before 2018.2 build 1293, there is credential disclosure via RPC commands.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

8
  • Jetbrains/Teamcity
    cpe:2.3:a:jetbrains:teamcity:*:*:*:*:*:*:*:*
    Range: <2018.2.5
  • Jetbrains/Upsource6 versions
    cpe:2.3:a:jetbrains:upsource:*:*:*:*:*:*:*:*+ 5 more
    • cpe:2.3:a:jetbrains:upsource:*:*:*:*:*:*:*:*range: <=2018.2
    • cpe:2.3:a:jetbrains:upsource:2018.2:build_1013:*:*:*:*:*:*
    • cpe:2.3:a:jetbrains:upsource:2018.2:build_1141:*:*:*:*:*:*
    • cpe:2.3:a:jetbrains:upsource:2018.2:build_1154:*:*:*:*:*:*
    • cpe:2.3:a:jetbrains:upsource:2018.2:build_1291:*:*:*:*:*:*
    • (no CPE)range: <2018.2 build 1293
  • JetBrains/UpSourcedescription

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.